diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 1999-08-25 16:59:26 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 1999-08-25 16:59:26 +0000 |
| commit | c79b16e11d70488f4de0e766d78f6a5ce77d99af (patch) | |
| tree | fad4e8d20108152d2d0a12229e4d92ad560a0c17 /apps/openssl.cnf | |
| parent | 43ca6c02dc702b8fff20205ec62ec03eed77eb1b (diff) | |
Allow extensions to be added to certificate requests, update the sample
config file (change RAW to DER).
Diffstat (limited to 'apps/openssl.cnf')
| -rw-r--r-- | apps/openssl.cnf | 17 |
1 files changed, 14 insertions, 3 deletions
diff --git a/apps/openssl.cnf b/apps/openssl.cnf index d70dd25622..8d044fb6b2 100644 --- a/apps/openssl.cnf +++ b/apps/openssl.cnf @@ -86,6 +86,8 @@ distinguished_name = req_distinguished_name attributes = req_attributes x509_extensions = v3_ca # The extentions to add to the self signed cert +# req_extensions = v3_req # The extensions to add to a certificate request + [ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = AU @@ -170,8 +172,16 @@ authorityKeyIdentifier=keyid,issuer:always #nsCaPolicyUrl #nsSslServerName +[ v3_req ] + +# Extensions to add to a certificate request + +basicConstraints = CA:FALSE +keyUsage = nonRepudiation, digitalSignature, keyEncipherment + [ v3_ca ] + # Extensions for a typical CA @@ -200,10 +210,11 @@ basicConstraints = CA:true # Copy issuer details # issuerAltName=issuer:copy -# RAW DER hex encoding of an extension: beware experts only! -# 1.2.3.5=RAW:02:03 +# DER hex encoding of an extension: beware experts only! +# obj=DER:02:03 +# Where 'obj' is a standard or added object # You can even override a supported extension: -# basicConstraints= critical, RAW:30:03:01:01:FF +# basicConstraints= critical, DER:30:03:01:01:FF [ crl_ext ] |